[PAM-4365] Setup CI/CD for Github Actions

Author: oyvindstegard

.github/workflows/deploy-dev.yml

@@ -0,0 +1,58 @@
+name: build-deploy-dev
+on:
+  push:
+    paths-ignore:
+      - "**.md"
+      - ".gitignore"
+      - "LICENCE"
+      - "CODEOWNERS"
+    branches:
+      - master
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v1
+      - uses: actions/setup-java@v1
+        with:
+          java-version: '12.x'
+      - uses: actions/cache@v1
+        with:
+          path: ~/.m2/repository
+          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+          restore-keys: |
+            ${{ runner.os }}-maven-
+      - name: build and test
+        run: mvn clean install
+      - name: pre-deploy
+        uses: navikt/pam-deploy/actions/pre-deploy@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: build and push docker image
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          docker build . --pull -t $IMAGE
+          echo "$GITHUB_TOKEN" | docker login --username "$GITHUB_REPOSITORY" --password-stdin docker.pkg.github.com
+          docker push $IMAGE
+      - name: deploy to dev-sbs
+        uses: nais/deploy/actions/deploy@v1
+        env:
+          APIKEY: ${{ secrets.NAIS_DEPLOY_APIKEY }}
+          CLUSTER: dev-sbs
+          RESOURCE: naiserator.yml
+          VARS: naiserator-dev.json
+      - name: post-deploy
+        uses: navikt/pam-deploy/actions/post-deploy@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: draft release
+        uses: actions/create-release@latest
+        env:
+          GITHUB_TOKEN: ${{ secrets.RELEASE_TOKEN }}
+        with:
+          tag_name: ${{ env.VERSION_TAG }}
+          release_name: ${{ env.APPLICATION }} ${{ env.VERSION_TAG }}
+          body: ${{ env.CHANGE_LOG }}
+          draft: true
+          prerelease: false

.github/workflows/deploy-prod.yml

@@ -0,0 +1,29 @@
+name: deploy-prod
+on:
+  release:
+    types: [published]
+
+jobs:
+  deploy-prod:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v1
+      - name: get release tag
+        env:
+          VERSION_TAG: ${{ github.event.release.tag_name }}
+        run: |
+          APPLICATION=$(echo $GITHUB_REPOSITORY | cut -d "/" -f 2)
+          IMAGE=docker.pkg.github.com/$GITHUB_REPOSITORY/$APPLICATION:$VERSION_TAG
+          echo "::set-env name=IMAGE::$IMAGE"
+          echo $IMAGE
+      - uses: nais/deploy/actions/deploy@v1
+        name: deploy to prod-sbs
+        env:
+          APIKEY: ${{ secrets.NAIS_DEPLOY_APIKEY }}
+          CLUSTER: prod-sbs
+          RESOURCE: naiserator.yml
+          VARS: naiserator-prod.json
+      - name: post-production
+        uses: navikt/pam-deploy/actions/post-production@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

nais-preprod.yaml

@@ -0,0 +1,5 @@
+{
+    "ingress": ["https://pam-ontologi-indexer.nais.oera-q.local"],
+    "pam_synonymer_typeahead_url": "https://api-gw-q0.oera.no/pam-ontologi-synonymer/rest/typeahead",
+    "pam_es_url": "https://tpa-stilling-opendistro-elasticsearch.nais.oera-q.local"
+}

naiserator-dev.json

@@ -0,0 +1,5 @@
+{
+    "ingress": ["https://pam-ontologi-indexer.nais.oera.no"],
+    "pam_synonymer_typeahead_url": "https://api-gw.oera.no/pam-ontologi-synonymer/rest/typeahead",
+    "pam_es_url": "https://tpa-stilling-opendistro-elasticsearch.nais.oera.no"
+}

naiserator-prod.json

@@ -6,35 +6,37 @@ metadata:
   labels:
     team: teampam
 spec:
-  image: repo.adeo.no:5443/pam-ontologi-indexer
+  image: {{ image }}
   port: 9023
-  replicas:
-    min: 1
-    max: 1
-    cpuThresholdPercentage: 50
-  prometheus:
-    enabled: true
-    path: /internal/actuator/prometheus
   liveness:
-    initialDelay: 180
     path: /internal/isAlive
+    initialDelay: 30
   readiness:
-    initialDelay: 180
     path: /internal/isReady
+    initialDelay: 30
+  replicas:
+    min: 1
+    max: 1
+    cpuThresholdPercentage: 50
   resources:
     limits:
       cpu: 1000m
-      memory: 1000Mi
+      memory: 1024Mi
     requests:
       cpu: 500m
-      memory: 500Mi
-  webproxy: false
+      memory: 512Mi
   vault:
     enabled: true
+  webproxy: false
+  prometheus:
+    enabled: true
+    path: /internal/actuator/prometheus
   ingresses:
-    - https://pam-ontologi-indexer.nais.oera.no
+  {{#each ingress as |url|}}
+     - {{url}}
+  {{/each}}
   env:
     - name: PAM_SYNONYMER_TYPEAHEAD_URL
-      value: https://api-gw.oera.no/pam-ontologi-synonymer/rest/typeahead
+      value: {{ pam_synonymer_typeahead_url }}
     - name: PAM_ES_URL
-      value: https://tpa-stilling-opendistro-elasticsearch.nais.oera.no
+      value: {{ pam_es_url }}